fa374346d02799b4058b2aef49e96a92_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa374346d02799b4058b2aef49e96a92_JaffaCakes118
Size

684KB
MD5

fa374346d02799b4058b2aef49e96a92
SHA1

514733a72a993c8074d10d41fcd3817040372639
SHA256

466f7035af4dcfe0f142e70da2dcb4b51600ce08e4b237439de7e7dac5a69955
SHA512

f319cfb5a8978334a85844c8f0c05b41f2893944ac432cf64b367108bfcf9e0c6597e5dc330073c05043bdea6b8dd5e5daf15f62043f1329d7ee770a5111d7b3
SSDEEP

3072:SpX0e1FB/DpKjCLHAm5iH8olVmFh1q8D0TK0Xu/ihIkhbikBNs3kYS2oCxdaGeZf:S+lihHDuJXu4tiCrDjb4tEn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa374346d02799b4058b2aef49e96a92_JaffaCakes118

Files

fa374346d02799b4058b2aef49e96a92_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2ac90c757ba7b4773aae19f563f36dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
ord516
ord628
ord631
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord608
ord717
ProcCallEngine
ord644
ord537
ord572
ord685
ord100
ord616
ord581

Sections

.text
Size: 328KB - Virtual size: 325KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 352KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ